CVE-2026-101069
Deferred Deferred - Pending Action

Path Traversal in Dbgate Export Handler

Publication date: 2026-09-28

Last updated on: 2026-09-28

Assigner: VulDB

Description
A weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file packages/api/src/controllers/databaseConnections.js of the component Export Handler. Executing a manipulation of the argument outputFile can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-28
Last Modified
2026-09-28
Generated
2026-09-28
AI Q&A
2026-09-28
EPSS Evaluated
N/A
NVD
CVE-2026-101069
EUVD
EUVD-2026-88245

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
dbgate dbgate to 7.2.5 (exc)
dbgate dbgate to 7.3.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a path traversal vulnerability in DbGate versions up to 7.3.1. The issue occurs in the exportModelSql function of databaseConnections.js where the outputFile argument is passed directly to fs.writeFile() without validation. This allows attackers to write files to arbitrary filesystem paths by manipulating the outputFile parameter.

Detection Guidance

Check if your DbGate instance is running versions 7.2.5 or earlier. Inspect network traffic for requests to the /database-connections/export-model-sql endpoint with an outputFile parameter pointing to sensitive paths. Look for unexpected file writes or modifications in system directories.

Impact Analysis

An attacker could exploit this to overwrite critical system files causing denial of service, corrupt system data, or write sensitive information to attacker-accessible locations. The attack requires only a valid connection ID which can be obtained through application endpoints.

Compliance Impact

This vulnerability could lead to unauthorized file writes, potentially exposing or corrupting sensitive data. For GDPR, this may result in unauthorized access or processing of personal data, violating principles of data protection and user rights. For HIPAA, it could allow unauthorized modification or disclosure of protected health information, compromising confidentiality and integrity requirements.

Mitigation Strategies

Upgrade DbGate to the latest version beyond 7.3.1. Disable anonymous authentication if enabled. Implement strict input validation for the outputFile parameter. Restrict filesystem permissions for the DbGate process. Monitor for unauthorized file writes or modifications.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101069. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart